Use of Uninitialized Variable in Google Chrome on Android

CVE-2026-126915

What is CVE-2026-126915?

An uninitialized variable in the Skia component of Google Chrome for Android prior to version 157.0.8103.78 can be exploited by a remote attacker. This flaw occurs when a compromised renderer process allows the execution of arbitrary code outside the intended sandbox environment via a specially crafted HTML page. As a result, this vulnerability poses a significant security risk for users running affected versions of the web browser.

References